Generated by JEB on 2019/08/01

PE: C:\Windows\System32\netwphelper.dll Base=0x180000000 SHA-256=72969C9A6CF748D54187ED8AA838A1BDEE1651ED34D2EDB31CE6642DF9FEA47D
PDB: netwphelper.pdb GUID={C66604C0-492F-64F6-6B6F98F4DF513F48} Age=1

127 located named symbols:
0x18000187C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180001690: "__cdecl FindPESection" _FindPESection
0x1800022B0: "__cdecl _sz_api_ms_win_shell_shellfolders_l1_1_0_dll" __sz_api_ms_win_shell_shellfolders_l1_1_0_dll
0x1800010F0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180003010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000116C: "__cdecl CRT_INIT" _CRT_INIT
0x180002188: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001AE0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800010A0: "long __cdecl NetWPHelper::SHGetKnownFolderPath(struct _GUID const & __ptr64,unsigned long,void * __ptr64,unsigned short * __ptr64 * __ptr64)" ?SHGetKnownFolderPath@NetWPHelper@@YAJAEBU_GUID@@KPEAXPEAPEAG@Z
0x1800022E0: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x1800010B0: "long __cdecl NetWPHelper::EnableBluetoothRadios(bool)" ?EnableBluetoothRadios@NetWPHelper@@YAJ_N@Z
0x180002230: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180002118: "__cdecl _imp_SetThreadExecutionState" __imp_SetThreadExecutionState
0x180001674: "__cdecl XcptFilter" _XcptFilter
0x180002238: "__cdecl _xc_a" __xc_a
0x18000229C: "__cdecl _guard_iat_table" __guard_iat_table
0x18000184F: "__cdecl initterm" _initterm
0x1800029D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800035C8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800021C8: "__cdecl _imp_Sleep" __imp_Sleep
0x180002258: "__cdecl _xi_z" __xi_z
0x1800010B0: "long __cdecl NetWPHelper::Shell_LaunchSessionByUri(unsigned short const * __ptr64)" ?Shell_LaunchSessionByUri@NetWPHelper@@YAJPEBG@Z
0x180002150: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000185B: "__cdecl _C_specific_handler" __C_specific_handler
0x180001680: "__cdecl amsg_exit" _amsg_exit
0x1800022DC: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180001030: "long __cdecl NetWPHelper::GetPhoneBuildInfo(struct NetWPHelper::_PHONEBUILDINFO * __ptr64)" ?GetPhoneBuildInfo@NetWPHelper@@YAJPEAU_PHONEBUILDINFO@1@@Z
0x1800010B0: "long __cdecl NetWPHelper::ShowAcceptanceDialog(enum NetWPHelper::Shl::ActionDialog::Importance::Importance,unsigned long,unsigned long,unsigned long,unsigned long,struct HINSTANCE__ * __ptr64)" ?ShowAcceptanceDialog@NetWPHelper@@YAJW4Importance@2ActionDialog@Shl@1@KKKKPEAUHINSTANCE__@@@Z
0x180001030: "int __cdecl NetWPHelper::UseFeatureDependentString(enum NetWPHelper::tagPRODUCT_FEATURE)" ?UseFeatureDependentString@NetWPHelper@@YAHW4tagPRODUCT_FEATURE@1@@Z
0x180002158: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180002178: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800035B8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001008: DllMain
0x1800021F8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800021B8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002168: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180002120: KERNEL32_NULL_THUNK_DATA
0x180003000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180002A34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180002180: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1800022DC: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180001740: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800035A0: "__cdecl _hmod__api_ms_win_shell_shellfolders_l1_1_0_dll" __hmod__api_ms_win_shell_shellfolders_l1_1_0_dll
0x180002980: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180002734: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800013B0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180002200: "__cdecl _imp__initterm" __imp__initterm
0x180002A20: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800035A8: "__cdecl _onexitend" __onexitend
0x180002228: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002170: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800021E8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180002248: "__cdecl _xi_a" __xi_a
0x1800021D8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180002138: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x1800010B0: "long __cdecl NetWPHelper::PlayEventSound(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,void * __ptr64)" ?PlayEventSound@NetWPHelper@@YAJPEBG00KPEAX@Z
0x180002788: api-ms-win-shell-shellfolders-l1-1-0_NULL_THUNK_DATA_DLB
0x180005008: api-ms-win-shell-shellfolders-l1-1-0_NULL_THUNK_DATA_DLA
0x180002760: api-ms-win-shell-shellfolders-l1-1-0_NULL_THUNK_DATA_DLN
0x180002714: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_shell_shellfolders_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_shell_shellfolders_l1_1_0_dll
0x1800029BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800035D0: "__cdecl pRawDllMain" _pRawDllMain
0x180001090: "int __cdecl NetWPHelper::GetPhoneVersion(struct _OSVERSIONINFOW * __ptr64)" ?GetPhoneVersion@NetWPHelper@@YAHPEAU_OSVERSIONINFOW@@@Z
0x180001650: "__cdecl _security_check_cookie" __security_check_cookie
0x180002240: "__cdecl _xc_z" __xc_z
0x180002190: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180001A52: "__cdecl _tailMerge_api_ms_win_shell_shellfolders_l1_1_0_dll" __tailMerge_api_ms_win_shell_shellfolders_l1_1_0_dll
0x180001A46: "__cdecl _imp_load_SHGetKnownFolderPath" __imp_load_SHGetKnownFolderPath
0x1800021E0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180002128: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x1800021C0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1800029E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800021A0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180002260: "__cdecl _guard_fids_table" __guard_fids_table
0x180002220: msvcrt_NULL_THUNK_DATA
0x180002010: "__cdecl load_config_used" _load_config_used
0x180002140: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180002130: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1800021F0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180002160: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800021B0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180002198: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800021A8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800022E0: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180001030: "unsigned long __cdecl NetWPHelper::WiFiDevNodeOff(unsigned long)" ?WiFiDevNodeOff@NetWPHelper@@YAKK@Z
0x180001870: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800010C0: "long __cdecl NetWPHelper::PreventSleep(bool)" ?PreventSleep@NetWPHelper@@YAJ_N@Z
0x180002218: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180003008: "__cdecl _security_cookie" __security_cookie
0x1800010B0: "long __cdecl NetWPHelper::GetChamberSidFromId(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetChamberSidFromId@NetWPHelper@@YAJPEBGPEAPEAG@Z
0x1800029F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800035B0: "__cdecl _onexitbegin" __onexitbegin
0x1800010B0: "long __cdecl NetWPHelper::CreateProcessInChamber(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,int,unsigned long,unsigned short const * __ptr64,struct _STARTUPINFOW * __ptr64,struct _PROCESS_INFORMATION * __ptr64)" ?CreateProcessInChamber@NetWPHelper@@YAJPEBG00PEAGHK0PEAU_STARTUPINFOW@@PEAU_PROCESS_INFORMATION@@@Z
0x180001040: "long __cdecl NetWPHelper::GetPhoneBuildString(unsigned short * __ptr64,unsigned __int64)" ?GetPhoneBuildString@NetWPHelper@@YAJPEAG_K@Z
0x180002148: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180002A0C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x180001774: "__cdecl _security_init_cookie" __security_init_cookie
0x18000296C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180002208: "__cdecl _imp_malloc" __imp_malloc
0x1800018C0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800035C0: "__cdecl _native_startup_state" __native_startup_state
0x180005000: "__cdecl _imp_SHGetKnownFolderPath" __imp_SHGetKnownFolderPath
0x180001060: "int __cdecl NetWPHelper::QueryPhoneInformation(enum NetWPHelper::_PHONE_INFORMATION_KEY,unsigned short * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?QueryPhoneInformation@NetWPHelper@@YAHW4_PHONE_INFORMATION_KEY@1@PEAG_KPEA_K@Z
0x1800029A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180002210: "__cdecl _imp_free" __imp_free
0x1800016E0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800021D0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180002994: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180002A48: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]